IT Infrastructure Engineer (Wintel & Security) in Abingdon

On behalf of UKAEA (UK Atomic Energy Authority), we are looking for an IT Infrastructure Engineer (Wintel & Security) INSIDE IR35 for a 6 months contract based in Abingdon Hybrid. SC Clearance is an essential requirement for this role; as a minimum, you must be willing and eligible to undergo checks. Preference may be given to candidates who meet all of the essential criteria and hold active SC clearance.

UKAEA runs the UK's national fusion energy research programme, sponsored by the Government's Department for Energy Security & Net Zero. They are on a mission to deliver safe, sustainable, low-carbon energy from fusion, achieving maximum scientific and economic benefit along the way.

As an IT Infrastructure Engineer (Wintel & Security), your main responsibilities will be:

• Design, build, configure, harden, and deploy secure infrastructure solutions.
• Administer and support Windows Server and core Wintel services.
• Manage and maintain Active Directory, including users, groups, OU structures, and authentication services.
• Design, implement, and troubleshoot Group Policy Objects (GPOs) to enforce security and operational standards.
• Implement and maintain secure configuration baselines aligned to CIS Benchmarks and security best practice.
• Support infrastructure migrations, platform upgrades, and technology refresh programmes.
• Deploy and manage solutions using Microsoft Intune, MECM/SCCM, and Microsoft Endpoint Management technologies.
• Support vulnerability remediation, patch management, and security hardening initiatives.
• Monitor and remediate configuration drift across infrastructure platforms.
• Implement endpoint security, device compliance, and Zero Trust controls.
• Develop automation solutions using PowerShell and configuration management tools.
• Produce technical documentation, implementation guides, and operational procedures.
• Work closely with architects, delivery teams, and security specialists to deliver secure and resilient services.

Essential Skills & Experience:

• Strong experience in an Infrastructure Engineer, Wintel Engineer, or Microsoft Infrastructure Engineer role.
• Hands-on experience supporting Windows Server environments.
• Strong administration experience with Active Directory.
• Proven experience designing and managing Group Policy (GPO).
• Good knowledge of Microsoft technologies, including Windows Server, Active Directory, Intune, MECM/SCCM, and Microsoft Endpoint Management.
• Experience implementing and maintaining secure configuration baselines.
• Knowledge of security hardening, vulnerability management, and endpoint security.
• PowerShell Scripting and infrastructure automation experience.
• Experience delivering infrastructure projects, upgrades, migrations, and deployments.
• Understanding of Zero Trust principles and secure infrastructure design.

Desirable:

• Experience working within highly regulated or secure environments.
• Knowledge of CIS Benchmarks and NCSC guidance.
• Experience with Infrastructure as Code and configuration management tools.
• Exposure to disaster recovery, cyber recovery, and resilience programmes.

Please be aware that this role can only be worked within the UK and not Overseas.

DE&I Commitment: CLIENT NAME guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance. CLIENT NAME guarantees to interview veterans or spouses/partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates/military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

In applying for this role, you acknowledge the following: this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such, the payment to the intermediary and your income resulting from this contract will be different.